Behind the FRITZ!box Settings

[reddington]

Have a nice day dear community

I'm facing a problem that I can't seem to solve.

Here are my settings

Fritzbox: 192.168.178.1
OPNSense WAN: 192.168.178.3
OPNSense LAN: 192.168.178.4
WAN Gateway OPNSense: 192.168.178.1
LAN Gateway OPNSense: 192.168.178.3
DNS server OPNSense: 192.168.178.1

Cable goes from the OPNSense WAN port into VLAN2 where the cable from the Fritzbox also hangs inside (Mngt Switch)
Cable from the OPNSense LAN goes into VLAN1 where the rest of the network is located.

IPv4 routes are created on the Fritzbox at 192.168.178.3

I can successfully ping 1.1.1.1 and 8.8.8.8 via OPNSense.

With my PC 192.168.178.XX in VLAN 1 I can also ping my other devices, but I have no access to the Fritzbox or the Internet.

I hope you can help me

[9axqe]

I don't know what type of internet access the fritz!box has, but can't you configure it to act as a pure modem or in bridge mode? That would greatly simplify your setup, then the opnsense is the one receiving the public IP from the ISP and you don't have double NAT and all the problems this will be causing you down the road...

Example of bridge mode config for Fritz!Box

[seed]

Fritzbox: 192.168.178.1
OPNSense WAN: 192.168.178.3
OPNSense LAN: 192.168.178.4

Looks like you have the same subnet on the lan and wan side. This can cause a lot of trouble if not coinfigured correctly.

Please set the lan side to  192.168.179.1/24 for example.

[weeßicknich]

We do not know the subnet sizes, do we?

[seed]

We do not know the subnet sizes, do we?

we dont. But the default fritzbox subnet is: 192.168.178.1/24

[weeßicknich]

Whatever the mask it is, you are right.
I oughtta get my eyes checked since I totally read those third octets as being different. They are indeed the same. Ouch. 

[reddington]

I works, I have changed the Lan IP


Gesendet von iPhone mit Tapatalk

[uli]

Please set the lan side to  192.168.179.1/24 for example.

I would avoid using this address.
The Fritzbox uses 192.168.179.1/24 for the guest-network.

The default address 192.168.178.1/24 for the Fritzbox is changeable if you don't like it. But the address for the guest-network is not changeable.